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In the Claims 

The status of claims in the case is as follows: 
Claims 1-7. Canceled. 

8. [Previously presented] A method for allowing the 
definition and configuration of NAT directly with definition 
and configuration of IPsec-based VPN connections and VPN 
policy, cotttprising the steps executed by a digital processor 

5 at one end of a VPN connection of : 

6 configuring the requirement for VPN NAT by a yes/no 

7 decision in a policy database for each of the three 

8 types of VPN NAT, said three types being VPN NAT type a 

9 outbound source IP NAT, VPN NAT type c inbound source 

10 IP NA T, and VPN NAT type d inbound destination IP NAT; 

11 and 

12 configuring a remote IP address pool or a server IP 

13 address pool selectively responsive to said yes/no 

14 decision for each said VPN NAT type. 

1 9. [Original] The method of claim 8, further comprising 
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2 the step of configuring a unique said remote IP address pool 

3 for each remote address to which a VPN connection will be 

4 required, whereby said remote IP address pool is keyed by a 

5 remote ID. 

1 10. [Original] The method of claim 8, further comprising 

2 the step of configuring said server IP address pool once for 

3 a system being configured. 

1 11. [Previously presented] A method of providing customer 

2 tracking of VPN NAT activities as they occur in an operating 

3 system kernel, comprising the steps executed at one end of a 

4 VPN connection of: 

5 responsive to VPN connection configuration, generating 

6 journal records; 

7 updating said journal records with new records for each 

8 datagram processed through a VPN connection; and 

9 enabling a customer to manage said journal records. 
Claims 12-16. Canceled. 
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1 17. [Previously presented] A system for definition and 

2 configuration of NAT directly with definition and 

3 configuration of VPN connections and VPN policy executed by 

4 a digital processor at one end of a VPN connection, 

5 comprising: 

6 a policy database for configuring the requirement for 

7 VPN NAT by a yes/no decision for each of the three 

8 types of VPN NAT, said three types being VPN NAT type a 

9 outbound source IP NAT, VPN NAT type c inbound source 

10 l p NAT, and VPN NAT type d inbound destination IP NAT; 

11 and 

12 ^ remote IP address pool or a server IP address pool 

13 selectively configured responsive to said yes/no 

14 decision for each said VPN NAT type. 

Claims 18-22, Canceled 
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